AwesomeREA.org

Integration

x64dbg-MCP Server

Native x64dbg plugin, written in Zig for both x32dbg and x64dbg, that serves an MCP endpoint over streamable HTTP and SSE from inside the debugger. Agents can load or attach to a process, set software, hardware, memory and conditional breakpoints, step and trace, read registers, call stacks, threads, memory maps, imports, strings and cross-references, and run arbitrary x64dbg commands. A bundled SKILL.md guide tells agents to confirm the debugger state before every action.

Requirements and limitations

  • Windows with x64dbg; the plugin loads into x32dbg or x64dbg and resolves the debugger API at runtime. Install by copying the x32 and x64 plugin folders from the v1.6 release zip (2026-10-12) or a dist/ build into the x64dbg root; building needs Zig 0.16-dev or later and can cross-compile from Linux, macOS or WSL. The server starts automatically with the debugger.
  • Ports are 9094 for x64 and 9095 for x32. The README lists 0.0.0.0 as the default bind address, but the reviewed configuration code has defaulted to 127.0.0.1 since v1.2; the plugin's config dialog changes the address, port and token and saves them to mcp_config.json beside the x64dbg executable. A bearer token generated on first run is required on every request, and traffic is unencrypted HTTP, so the README warns against exposing the server to untrusted networks.
  • Many tools change the target or debugger state: memory writes and patches, instruction assembly, register writes, memory allocation, thread suspension, breakpoint commands and arbitrary debugger commands. DumpMemory and DumpModule write files to disk, and OEP detection and module dumping are aimed at packed executables.
  • MIT. The README limits use to authorized reverse engineering, malware analysis, security research and education. No plugin, debugger session or target was run, and the reviewed sources establish no REA connection.

About this entry

Type
Integration
Category
Independent MCP integrations
Relationship
Independent agent integration
Targets
Binary

Sources reviewed

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Primary sources

  1. README.md GitHub · duty1g/x64dbg-mcp-server · Revision 18be30a
  2. SKILL.md GitHub · duty1g/x64dbg-mcp-server · Revision 18be30a
  3. src/core/config.zig GitHub · duty1g/x64dbg-mcp-server · Revision 18be30a
  4. src/core/mcp_server.zig GitHub · duty1g/x64dbg-mcp-server · Revision 18be30a
  5. LICENSE GitHub · duty1g/x64dbg-mcp-server · Revision 18be30a
  6. https://github.com/duty1g/x64dbg-mcp-server/releases/tag/v1.6